CVE-2023-0135

🗓️ 10 Jan 2023 00:00:00Reported by ChromeType

Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium

Reporter	Title	Published	Views	Family All 52
FreeBSD	chromium -- multiple vulnerabilities	10 Jan 202300:00	–	freebsd
AstraLinux	Astra Linux - уязвимость в chromium	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the Google Chrome browser extension allows a perpetrator to access confidential data, compromise its integrity, and also cause service interruptions.	30 Jun 202300:00	–	bdu_fstec
Circl	CVE-2023-0135	5 May 202516:20	–	circl
CNNVD	Google Chrome 资源管理错误漏洞	10 Jan 202300:00	–	cnnvd
Cvelist	CVE-2023-0135	10 Jan 202300:00	–	cvelist
Debian	[SECURITY] [DSA 5317-1] chromium security update	13 Jan 202319:18	–	debian
Debian CVE	CVE-2023-0135	10 Jan 202300:00	–	debiancve
Tenable Nessus	Debian DSA-5317-1 : chromium - security update	14 Jan 202300:00	–	nessus
Tenable Nessus	FreeBSD : chromium -- multiple vulnerabilities (7b929503-911d-11ed-a925-3065ec8fd3ec)	10 Jan 202300:00	–	nessus

NVD

Vulners

Node

google chromeRange<109.0.5414.74

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "109.0.5414.74",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202311-11
crbug	www.crbug.com/1385831
security	www.security.gentoo.org/glsa/202305-10
chromereleases	www.chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html

05 May 2025 16:15Current

8.8High risk

Vulners AI Score8.8

CVSS 3.18.8

EPSS0.00116

SSVC

CWE-416